CVE-2017-1622

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. IBM X-force ID: 133120...

Code injection

IBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. IBM X-force ID: 133120...

CVE-2017-1622

CVE-2017-1622 affects IBM QRadar SIEM 7.2.x (7.2.0 to 7.2.8 Patch 13) and 7.3.x (7.3.0 to 7.3.1 Patch 6/7). The root cause is improper certificate validation in the QRadar Application Framework, allowing a MITM attacker to spoof a trusted entity. Affected component/file relates to certificate val...